We are researching a way to deploy Internet Explorer settings throughout to all the corporate desktops. We have decided to use the .INS settings and .cab (created from IEAK) for auto configuration for our installed IE base. The .INS and .cab are pulled down from a IIS server on the intranet.

During testing, we have discovered that for XP SP2 machines, when the workstation pulls down the .INS file, a popup message complains that the .cab file is not digitally signed.

My understanding is that, to make this work we will need to purchase a 'code signing certificate' and import it into AD.

Does anyone have any experience with this ?

0 Comments   [ - ] Hide Comments


Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
Answer this question or Comment on this question for clarity


I have done research on this but I have not ever had the chance to implement it. You will need a code signing certificate to sign the cab files. You can use Active Directory to push the certificate but if you wish you can use Certmgr.exe to install the certificate. I would probably try the Active Directory method because the documentation surrounding certmgr.exe is poor or at least I never found a good reference. What I got hung up on was the syntax for different certificate stores.

I know this is not allot of help but maybe it gets you in the right direction.
Answered 01/31/2005 by: kkaminsk
Ninth Degree Black Belt

Please log in to comment